General
- Target 2026-08-14_27b2b884121b3b10726cc79fcddf2359_amadey_cobalt-strike_elex_hellokitty_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_stealc_stop_vidar
- Size 9.0MB
- Sample260814-mrxhcs1fmg
- SHA256 1af20ec42a23858c169beb98cf9100eae0768dae7b793b930a0b54ade9680f91
- MD5 27b2b884121b3b10726cc79fcddf2359
- SHA1 1a0fef27aad4091923364be947494b1ac78a3c0b
- SHA512 978bb1f30e8a07b64bff67fe7f9ff2b58e1d10418edb686bf290d6cbea277d1169027ac85e5c901b591201916d48dacb38a73789a175722a6f4d5e4338233b2b
- SSDEEP 196608:BqE2S9+ULdNhWyZ/K0ttYVAATZb2eEXAa:BB2SlLdNcyZ/K0ttYZTkewN
- TLSH T12FA68C13F7E440B9E06AD175CA358721EB72BC2947B19ADF224076992F32AD17F39321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_27b2b884121b3b10726cc79fcddf2359_amadey_cobalt-strike_elex_hellokitty_hijackloader_icedid.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_27b2b884121b3b10726cc79fcddf2359_amadey_cobalt-strike_elex_hellokitty_hijackloader_icedid.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_27b2b884121b3b10726cc79fcddf2359_amadey_cobalt-strike_elex_hellokitty_hijackloader_icedid_luca-stealer_njrat_redline-stealer_remcos_rhadamanthys_stealc_stop_vidar
- Size 9.0MB
- SHA256 1af20ec42a23858c169beb98cf9100eae0768dae7b793b930a0b54ade9680f91
- MD5 27b2b884121b3b10726cc79fcddf2359
- SHA1 1a0fef27aad4091923364be947494b1ac78a3c0b
- SHA512 978bb1f30e8a07b64bff67fe7f9ff2b58e1d10418edb686bf290d6cbea277d1169027ac85e5c901b591201916d48dacb38a73789a175722a6f4d5e4338233b2b
- SSDEEP 196608:BqE2S9+ULdNhWyZ/K0ttYVAATZb2eEXAa:BB2SlLdNcyZ/K0ttYZTkewN
- TLSH T12FA68C13F7E440B9E06AD175CA358721EB72BC2947B19ADF224076992F32AD17F39321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory